CBL Mariner 2.0 Security Update: kata-containers / kata-containers-cc (CVE-2025-5791)

The version of kata-containers / kata-containers-cc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5791 advisory. - A flaw was found in the user's crate for Rust. This vulnerability allows...

CBL Mariner 2.0 Security Update: mysql (CVE-2025-50100)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50100 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versio...

CBL Mariner 2.0 Security Update: mysql (CVE-2025-50096)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50096 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: php (CVE-2025-1220)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1220 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions li...

CBL Mariner 2.0 Security Update: polkit (CVE-2025-7519)

The version of polkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7519 advisory. - A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an...

CBL Mariner 2.0 Security Update: iputils (CVE-2025-47268)

The version of iputils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47268 advisory. - ping in iputils before 20250602 allows a denial of service application error or incorrect data collection v...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2025-49176)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49176 advisory. - A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checki...

CBL Mariner 2.0 Security Update: mysql (CVE-2025-50076)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50076 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are...

CBL Mariner 2.0 Security Update: erlang (CVE-2025-4748)

The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4748 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdl...

CVE-2025-8573 Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page

Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page. Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete CMS security team gave this...

CBL Mariner 2.0 Security Update: protobuf (CVE-2025-4565)

The version of protobuf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4565 advisory. - Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-6170)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6170 advisory. - A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-49794)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49794 advisory. - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-6021)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6021 advisory. - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations ca...

CBL Mariner 2.0 Security Update: perl (CVE-2025-40909)

The version of perl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-40909 advisory. - Perl threads have a working directory race condition where file operations May target unintended paths. If a...

CBL Mariner 2.0 Security Update: jq (CVE-2025-48060)

"The version of jq installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48060 advisory. - jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present i...

PT-2025-31223 · Maptiler · Maptiler Tileserver-Php

Name of the Vulnerable Software and Affected Versions: MapTiler Tileserver-php version 2.0 Description: MapTiler Tileserver-php version 2.0 is susceptible to a Cross Site Scripting XSS issue. The layer GET parameter is reflected in an error message without proper HTML encoding. This allows an...

PT-2025-31224 · Maptiler · Maptiler Tileserver-Php

Name of the Vulnerable Software and Affected Versions: MapTiler Tileserver-php version 2.0 Description: MapTiler Tileserver-php version 2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles stored as files on the server via web...

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

CBL Mariner 2.0 Security Update: gnutls (CVE-2025-6395)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6395 advisory. - A NULL pointer dereference flaw was found in the GnuTLS software in gnutlsfigurecommonciphersuite...